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IN THE CLAIMS : 

1 . (currently amended) A system for conducting a transaction with privacy 

on a wide area network, said system comprising: 

a plurality of personal access d e vic e (PAD) devices (PADs\ each PAD contained 
in a manually portable housing and associated with a subscriber to said system, each sai4 
manually portable PAD storing a subscriber profile ef including information related to the 
subscriber and for generating interactive commands transmitted wirelessly; 

a privacy service provider (PSP) connected to the wide area network, each said 
manually portable PAD being directly accessible by said PSP under first conditions s e t by 
based on first predetermined subscriber information that sets a first condition for automatic 
authorization or for manual authorization as established by the subscriber r e pr e s e nt e d in said 
subscriber's profile for controlling the processing of requests for authorization of the transaction, 
and said PSP being responsive in real-time to the interactive and wirelessly transmitted 
commands from said manually portable PAD; 

a registered vendor (RV) connected to the wide area network; and 

a privacy shield network (PSN) connected to the wide area network, said RV 
being registered with said PSN and said PSN b e ing structured to carry communications relating 
to the transaction between said PSP and said RV relat e d to th e transaction und e r s e cond 
conditions s e t bv based on second predetermined subscriber information that sets a second 
condition as established by the subscriber in said subscriber's profile for controlling the 
completion of the transaction . 
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2. (original) The system of claim 1 , wherein said PAD stores private data 
associated with the subscriber, and wherein said PSP releases any of said private data to said RV 
only under said first and second conditions. 

3. (original) The system of claim 2, wherein said PSP also stores said profile 
and said private data. 

4. (original) The system of claim 1, wherein said PSP controls access by said 
RV to said PAD under said first and second conditions. 

5. (original) The system of claim 1, wherein said PSP includes a network server. 

6. (original) The system of claim 1 , wherein said RV includes a network server. 

7. (original) The system of claim 1 , wherein said PSN includes a network 

server. 

8. (original) The system of claim 1 , wherein said PSP controls access by said 
RV to said profile under said second conditions. 

9. (original) The system of claim 1, further comprising a second registered 
vendor (RV) connected to the wide area network, said PSP being accessible by said second RV 
under third conditions set by said profile, said second RV being accessible by the first mentioned 
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RV under fourth conditions set by said second RV and said first RV being accessible by said 
second RV under fifth conditions set by said first RV. 

10. (original) The system of claim 9, wherein said second conditions include 
authorization conditions for authorizing the transaction among said PAD, said first RV and said 
second RV. 

1 1 . (original) The system of claim 1 0, wherein said authorization conditions 
include a first authorization for authorizing said second RV to complete an intermediate 
transaction with said first RV. 

12. (original) The system of claim 11, wherein said first authorization is sent 
from said PSP to said second RV over said PSN, said PSN preventing said first RV from access 
to first authorization. 

13. (original) The system of claim 1, wherein said second conditions include 
authorization conditions for authorizing the transaction between said PAD and said RV. 

14. (original) The system of claim 13, wherein said authorization conditions 
control whether said first RV is authorized to request a response from said PAD. 

1 5 . (original) The system of claim 1 , wherein the wide area network is the 
Internet. 
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16. (currently amended) A personal access device (PAD) associated with a 
subscriber for conducting a transaction with privacy on a wide area network, said PAD 
comprising: 

a manually portable housing; 

a memory for storing a profile of the subscriber; 

a manually actuable command generator for generating interactive commands; 

a wireless transmitter for wirelessly transmitting the interactive commands 
directly to a privacy service provider (PSP) from the dir e ctly acc e ssibl e to th e manually portabl e 
PAD, with the PSP being responsive in real-time to the wirelessly transmitted interactive 
commands, and with the PSP being connected to the wide area network; and 

a receiver for receiving authorized requests from the PSP, the PSP dir e ctly 
communicating directly with said PAD based on first predetermined subscriber information that 
sets a first condition for automatic authorization or for manual authorization r e pr e s e nt e d as 
established bv the subscriber in und e r first conditions s e t by said subscriber's profile for 
controlling requests for authorization of the transaction , each authorized request having been 
received by said PSP over a privacy shield network (PSN) connected to the wide area network 
from a registered vendor (RV) or another privacy service provider, the RV being registered on 
the PSN and communicating with the PSP based on second predetermined subscriber 
information that sets a second condition as established by the subscriber in under second 
conditions s e t by said subscriber's p rofile for controlling the completion of the transaction . 
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17. (original) The PAD of claim 16, wherein the PSP receives first requests over 
the PSN and determines which ones of the first requests are authorized requests under said first 
conditions set by said profile. 

1 8. (original) The PAD of claim 17, wherein if the PSP determines that one of 
the first requests is not an authorized request, the PSP selectively responds to this first request 
over the PSN under second conditions set by said profile. 

19. (original) The PAD of claim 16, wherein said PAD is in the form of a 
selected one of a key chain fob, a pen, a cellular phone, a personal digital assistant, a computer 
and a card. 

20. (original) The PAD of claim 16, wherein said PAD stores private data 
associated with the subscriber, and wherein the PSP releases any of said private data to the RV 
only under said first and second conditions. 

2 1 . (original) The PAD of claim 20, wherein the PSP also stores said profile and 
said private data. 

22. (currently amended) A privacy service provider (PSP) for facilitating 
communications between a privacy shield network (PSN) and a personal access device (PAD) 
associated with a subscriber to the PSN, where the PAD stores a profile of the subscriber and 
where said PSP and the PSN are connected to a wide area network, said PSP comprising: 
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a receiver for receiving interactive commands transmitted wirelessly from the 
PAD, wherein the PAD is contained in manually portable housing; 

a server, responsive in real-time to the wirelessly transmitted interactive 
commands from the manually portable PAD, for communicating with a registered vendor (RV) 
over the PSN based on first predetermined subscriber information that sets a first condition for 
automatic authorization or for manual authorization r e pr e s e nt e d as established by the subscriber 
in und e r first conditions s e t by said subscriber profile for controlling the completion of 
communications and in accordance with wirelessly transmitted interactive commands received 
from the PAD, said server also for receiving first requests from the RV and for determining 
which ones of the first requests are authorized requests based on second predetermined 
subscriber information that sets a second condition as established by the subscriber in under 
s e cond conditions s e t by said subscriber profile for controlling the communications ; and 

a transmitter for transmitting in real-time the authorized requests to the PAD. 

23. (original) The PSP of claim 22, wherein said server is for communicating 
with a plurality of RVs over the PSN in the same way as with the first-mentioned RV. 

24. (original) The PSP of claim 22, wherein the PAD stores private data 
associated with the subscriber, and wherein said PSP releases any of said private data to the RV 
only under said first and second conditions. 

25. (original) The PSP of claim 24, wherein said PSP also stores said profile and 
said private data. 
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26. (currently amended) A privacy shield network (PSN) connected to a wide area 
network, said PSN controlling communications among a plurality of privacy service providers 
(PSPs) and a plurality of registered vendors (RVs), where each PSP is directly controlled by 
interactive commands transmitted wirelessly in real-time from a r e sp e ctive personal access 
device (PAD) contained in a r e sp e ctiv e manually portable housing and associated with a 
r e sp e ctiv e an individual subscriber to said PSN and is further controlled under conditions set by 
a profile associated with each th e r e spectiv e subscriber and stored in the r e sp e ctiv e subscriber's 
PAD, said PSN comprising: 

a first server structure for controlling registration of vendors as RVs, where said 
PSN prevents transfer of communications from unregistered vendors to any of the PSPs and 
RVs; and 

a second server structure for controlling communications using the wide area 
network from any of the PSPs and RVs to any of the PSPs and RVs, 

wherein said second server structure controls any communication in real-time 
between a first one of the PSPs and any other one of the PSPs and RVs based on first 
predetermined subscriber information that sets a first condition for automatic authorization or for 
manual authorization for controlling the processing of communications repr e s e nt e d as 
established by the subscriber in und e r conditions s e t by the subscriber's profile stored in the 
PAD and controlled by the first PSP, with the real-time control of communications performed by 
the interactive commands transmitted wirelessly from the manually portable PAD directly 
accessible to each PSP. 
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27. (original) The PSN of claim 26, wherein said second server structure controls 
routing of communications from any of the PSPs and RVs to any of the PSPs and RVs over the 
wide area network. 

28. (original) The PSN of claim 26, wherein each PAD stores private data 
associated with the respective subscriber, and wherein the associated PSP releases any of said 
private data to any of the PSPs and RVs only under said first and second conditions. 

29. (original) The PSN of claim 27, wherein at least one of the PSPs also stores 
said profile and said private data of the respective subscriber. 

30. (currently amended) A method of conducting a transaction with privacy using a 
privacy shield network (PSN) connected to a wide area network, said method comprising the 
steps of: 

storing a profile of a PSN subscriber to th e PSN in a personal access device 
(PAD) contained in a manually portable housing that is and associated with the subscriber; 

generating interactive commands using the PAD; 

wirelessly transmitting the interactive commands from the PAD; 

directly accessing the PAD in real-time based on first predetermined subscriber 
information that sets a first condition for automatic authorization or for manual authorization 
represent e d as established by the subscriber in und e r first conditions s e t by the subscriber profile 
for controlling the processing of requests for authorization of the transaction using a privacy 
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service provider (PSP) connected to the wide area network, the PSP being controlled by the 
wirelessly transmitted interactive commands from the PAD; 

registering a vendor with the PSN as a registered vendor (RV) connected to the 
wide area network; and 

carrying communications between the PSP and the RV related to the transaction 
based on second predetermined subscriber information that sets a second condition as established 
by the subscriber in und e r s e cond conditions s e t by the subscriber profile for controlling the 
completion of the transaction using the PSN. 

3 1 . (currently amended) A method of using a personal access device (PAD) 
associated with a subscriber for conducting a transaction with privacy on a wide area network, 
said method comprising the steps of: 

storing a profile of the subscriber in a memory contained in a manually portable 
housing of the PAD; 

generating interactive commands in the PAD; 

wirelessly transmitting the interactive commands to a privacy service provider 
(PSP) directly accessible to the PAD and connected to the wide area network; and 

receiving authorized requests from the PSP, the PSP communicating in real-time 
with the PAD based on first predetermined subscriber information that sets a first condition for 
automatic authorization or for manual authorization r e pr e s e nt e d as established by the subscriber 
in und e r first conditions s e t by the subscriber's profile for controlling the completion of the 
transaction , each authorized request having been received by the PSP under the control of a 
privacy shield network (PSN) connected to the wide area network, the RV being registered with 
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the PSN and communicating with the PSP based on second predetermined subscriber 
information that sets a second condition as established by the subscriber in und e r s e cond 
conditions s e t by the subscriber's profile. 

32. (currently amended) A method of using a privacy shield network (PSN) 
connected to a wide area network to control communications among a plurality of privacy 
service providers (PSPs) and a plurality of registered vendors (RVs), where each PSP is directly 
controlled by interactive commands transmitted wirelessly from a resp e ctiv e personal access 
device (PAD) contained in a r e sp e ctiv e manually portable housing and associated with a 
r e sp e ctiv e an individual subscriber to the PSN and is further controlled und e r conditions s e t by a 
profile of the resp e ctiv e individual subscriber stored in the r e sp e ctiv e subscriber's PAD, said 
method comprising the steps of: 

using a first service structure for controlling registration of vendors as RVs, where 
the PSN prevents transfer of communications of unregistered vendors to any of the PSPs and 
RVs; and 

using a second server structure for controlling communications using the wide 
area network from any of the PSPs and RVs to any of the PSPs and RVs, 

wherein the second server structure controls any communication in real-time 
between a first one of the PSPs and any other one of the PSPs and RVs under conditions set by 
the subscriber's profile, with the real-time control of communications performed by the 
interactive commands transmitted wirelessly from the manually portable PAD directly accessible 
to each PSP. 
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Claims 33-42 (canceled). 

43 . (currently amended) A system for a plurality of individual subscribers to 
receive and transmit communications via the Internet, the system comprising: 

an XML privacy service provider (PSP) linked to the Internet for communication; 

a plurality of private XML subscriber data files accessible to said PSP, each file 
being associated with a respective subscriber; 

a subscriber^programmable personal access device (PAD) contained in a 
manually portable housing that provides for e ach subscriber te access to the respective 
subscriber's data file and te directly communicat e communicates in real-time with said PSP 
using interactive commands transmitted wirelessly from the PAD; and 

a plurality of registered vendors (RVs) linked to the Internet for communication 
with the subscribers under conditions set by the respective subscriber's data files through said 
PSP. 

44. (previously presented) The system of claim 43, wherein said PSP 
comprises: 

means for receiving communications from a subscriber; 

means for transmitting a subscriber's file to that subscriber and for changing data 
in the subscriber's file in response to the subscriber's authorization; and 

means for communicating with an RV in connection with a subscriber's file. 
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45. (previously presented) The system of claim 43, wherein each XML 
subscriber data file includes at least one of the following: 

subscriber identifying data; 

subscriber credit account data; 

subscriber cash account data; 

subscriber product preference identifiers; and 

subscriber product exclusion identifiers. 

46. (previously presented) The system of claim 43, wherein each PAD 
comprises: 

a CPU, an operating system and a memory device; 
a battery; 

a wireless RF communication chip; 

an input/output interface; and 

an encryption key embedded in removable ROM. 

47. (currently amended) A portable battery-powered personal access device 
(PAD) for use bv a subscriber in a system for a plurality of individual subscribers that enables 
the subscriber to receive and transmit private personalized communications via the Internet, the 
system comprising: 

an XML privacy service provider (PSP) linked to the Internet for communication, 
a plurality of private XML subscriber data files accessible to the PSP, each file 
being associated with a r e sp e ctiv e an individual subscriber, said PAD b e ing for e ach providing a 
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subscriber te access to that th e resp e ctive subscriber's file and communicat e a communications 
Unk with the PSP, and 

a plurality of registered vendors (RVs) linked to the Internet for communication 
with the subscribers under conditions set by each of the respective subscriber's files through the 
PSP, said PAD comprising: 

a manually portable housing; 

at least one programmable integrated circuit (IC) device that includes encrypted 
identification means; 

non-directional, short-range communication signal generation and receiving 
means for wirelessly transmitting interactive commands directly to the PSP in real-time; 

a CPU, an operating system and a memory device; and 

an input/output interface. 

48. (previously presented) The PAD of claim 47, wherein said IC device is 
removable from said PAD. 

49. (previously presented) The PAD of claim 47, wherein the encrypted 
identification means is a unique digital code embedded in ROM. 

50. (previously presented) The PAD of claim 49, wherein said IC device is 
preprogrammed to disable the identification means in the event that security of the unique digital 
code is breached. 



14 



204,896 

5 1 . (currently amended) The PAD of claim 47, further comprising a housing, 
wherein an electronic display is visible through an aperture in said housing and the PAD includes 
at least one manual actuator for controlling functions of said PAD. 

52. (previously presented) The PAD of claim 5 1 5 further comprising a 
microphone having an on/off switch and a voice recognition program that converts voice to 
digital data for storage in said memory device. 
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